Skip to content

GUACAMOLE-808: Add page redirection on login - #1233

Open
adb014 wants to merge 2 commits into
apache:mainfrom
adb014:redirect
Open

GUACAMOLE-808: Add page redirection on login#1233
adb014 wants to merge 2 commits into
apache:mainfrom
adb014:redirect

Conversation

@adb014

@adb014 adb014 commented Jul 23, 2026

Copy link
Copy Markdown

This is quite an intrusive pull request that allows reauthentication to redirect back to the initial page so that in progress work can be directly refound.. See the discussion in the Jira for details

      - Allow store the full URI in RequestDetails
      - Add methods to get/set originalURI in AuthenticatedUser and derived classes
      - Set the originalURI in JDBC base class
      - Promote session manager to base SSO class; Use it to store the originalURI in openid
      - Allow redirection to be stored in GuacamoleSession iff new login
      - Store the redirection in the GuacamoleSession the AuthenticationService
      - If redirection set in GuacamoleSession pass it back on the /api/tokens REST endpoint
      - In the javascript in the redirection is set on the /api/tokens endpoint, redirect after authentication
Comment thread guacamole/src/main/java/org/apache/guacamole/GuacamoleSession.java
Comment thread guacamole/src/main/java/org/apache/guacamole/GuacamoleSession.java Outdated
$location.url('/');
else
$route.reload();
$route.reload();

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Is this change going to adversely impact situations where SSO is not in use and where the behavior of the redirection back to the home screen actually would be expected? For example, configurations where JDBC is the only provider in use, and the re-authentication gets triggered?

@adb014 adb014 Aug 17, 2026

Copy link
Copy Markdown
Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Why would you expect the behavior to be different with or without SSO ? OpenID SSO needs special treatment because of the redirection to the identity provider... Some SSO providers, like the SSL provider don't use redirection and so the base treatment is used... In all cases the idea is to come back to the requested page after authentication

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants